SBI Cyber Incident: Funds Safe, but Thousands of Customer Records Exposed
SBI informs customers after data surfaced on the dark web. The bank confirms account balances and funds remain safe.
The State Bank of India (SBI) has taken decisive action to notify customers whose personal data was caught up in a recent SBI cyber incident. In a statement released on Friday, the public sector lender confirmed that it has reached out to affected individuals via email and WhatsApp to keep them informed while emphasizing a critical point: all account balances and funds remain completely safe.
How the Breach Was Discovered
The alarm bells rang on October 16, when the bank received multiple alerts. These warnings came from its Threat Intelligence Service Provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In). The alerts indicated that suspected customer data had surfaced on the dark web, prompting an immediate response from the lender.
Following the alerts, SBI conducted a preliminary analysis of approximately 3.75 lakh records. Out of these, the bank identified 3,897 customer records that contained personally identifiable information (PII), which triggered a more comprehensive and detailed investigation.
What Data Was Leaked?
The breach involved several layers of personal and banking-related information. According to the bank, the exposed data included:
- Personal Details: Full names, dates of birth, gender, and residential addresses.
- Contact Information: Registered mobile numbers and email addresses.
- Banking Identifiers: Branch details and Customer Information File (CIF) identifiers.
- Loan Data: Lead IDs and metadata associated with loan and lead records, along with other related files.
Bank's Response and Containment
As soon as the vulnerability was flagged, SBI activated its cyber incident response and containment protocols. To ensure a thorough audit, the bank appointed an independent cybersecurity agency empanelled with CERT-In to determine the exact nature and the full extent of the breach.
In a filing with the stock exchange on Tuesday, the bank clarified that the incident has not had any material impact on its overall business operations, financial performance, or business continuity. SBI assured the public that its core banking functions are operating normally without any disruption.
Warning to Customers
While the bank maintains that funds are secure, it has urged all customers to remain vigilant to prevent secondary attacks, such as phishing or social engineering. The lender advised customers to:
- Strictly refrain from sharing OTPs, PINs, or passwords with anyone.
- Be cautious of suspicious phone calls, emails, or messages.
- Adhere to safe digital banking practices at all times.
"The Bank has individually informed all customers, whose data was identified as being involved, through email and/or WhatsApp. We reiterate that your account balances and funds are safe with us," the bank stated in its official release.